On Fri, Mar 18, 2011 at 4:12 AM, A.Wagner <m...@aw030.de> wrote: > Hi, > > i try to authenticate with md5 digest. > > i am getting the challenge and build the response: > <response > xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>longbase64encodedstring</response> > > but then the server always responds with (even when response stanza is > empty): > <failure > xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><invalid-authzid/></failure> > > Which format the authid (authid:realm:passwd) and authzid > (Y:nonce:cnonce(:authzid)) must have? > testuser, testu...@test.org, testu...@test.org/unknownclient ?
"If the initiating entity does not wish to act on behalf of another entity, it SHOULD NOT provide an authorization identity." - http://xmpp.org/internet-drafts/draft-ietf-xmpp-3920bis-13.html#sasl-rules-authzid I'm assuming you are not trying to impersonate another user, so authzid for you is the empty string "". This would work correctly with all servers I believe, while providing an authzid when you don't need to is going to break with some servers. > > Why this failure is returned even when the response stanza is empty?: > <response xmlns='urn:ietf:params:xml:ns:xmpp-sasl'></response> > > Greetz from Berlin > Thx. > _______________________________________________ JDev mailing list Info: http://mail.jabber.org/mailman/listinfo/jdev Unsubscribe: jdev-unsubscr...@jabber.org _______________________________________________